CVE-2021-40444

EXP Ladon CVE-2021-40444 Office Vulnerability Exploitation Vulnerability Overview On September 8th Beijing time, NSFOCUS CERT monitored that Microsoft released a security advisory disclosing the Microsoft MSHTML remote code execution vulnerability. Attackers can craft malicious ActiveX controls f...

CVE-2024-4947

CVE-2024-4947 A in-the-wild V8 type confusion bug. This repository contains Analysis and PoCs to escalate this vulnerability to have the same exploit pattern as CVE-2024-12695, Object Hash Reassign. AddressOf / FakeObject Primitives constructed by using the type confusion to assign object hash to...

CVE-2022-22620

CVE-2022-22620 CVE-2022-22620: Use-after-free in Safari https://googleprojectzero.github.io/0days-in-the-wild/0day-RCAs/2022/CVE-2022-22620.html...

CVE-2023-38831-RaRCE

RaRCE, Exploit generator for CVE-2023-38831 This is an easy to install and easy to use, versatile exploit generator for CVE-2023-38831, a vulnerability that affects WinRAR versions before 6.23. RARLabs WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a...

CVE-2023-21674

First in-the-wild 0-day of 2023 🔥 CVE-2023-21674 is a vulnerability in Windows Advanced Local Procedure Call ALPC that could lead to a browser sandbox escape and allow attackers to gain SYSTEM privileges discovered by Avast root@kitploit: kd !analyze -v Bugcheck Analysis PAGEFAULTINNONPAGEDAREA 5...

0days-in-the-wild

0-days explotados en la naturaleza Este repositorio es una referencia de documentos sobre vulnerabilidades de día cero detectadas como explotadas en la naturaleza. Incluye tanto análisis de causa raíz RCA para cada exploit de día cero como una tabla que rastrea cada día cero. Estos documentos est...

n-days

n-days A collection of POCs & writeups for iOS vulnerabilities either discovered by me, binary diffed from In-The-Wild updates or just cool non-public bugs. CVE| Patched In| Link| Reported by me| Exploited ITW| Description ---|---|---|---|---|--- CVE-2021-1757| iOS 14.4| poc - info| ✖️| ✖️| Kernel...

CVE-2025-11371

CVE-2025-11371 In the default installation and configuration of Gladinet CentreStack and TrioFox, there is an unauthenticated Local File Inclusion Flaw that allows unintended disclosure of system files. Exploitation of this vulnerability has been observed in the wild. This issue impacts Gladinet...

CVE-2023-38831

CVE-2023-38831 WinRAR RARLabs WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a ZIP archive. The issue occurs because a ZIP archive may include a benign file such as an ordinary .JPG file and also a folder that has the same name as t...

CVE-2023-38831-PoC

CVE-2023-38831 PoC This repository is just a Proof-of-Concept for CVE-2023-38831 Zero-Day vulnerability in WinRAR RARLabs WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a ZIP archive. The issue occurs because a ZIP archive may inclu...

cve-2019-1458_POC

CVE-2019-1458: Going from 'in the wild report' to POC Intro In December Kaspersky published a blogpost about 0day exploit used in the wild. It piqued my interest because although they described how the exploit was working, they didn't provide any POC in their analysis. This is why I decided to tr...

CVE-2019-1367

0x00 Background Internet Explorer is a web browser developed by Microsoft. It has a massive user base. On September 23, Microsoft released an emergency security update to fix a remote code execution vulnerability affecting Internet Explorer. Discovered by Google's Threat Analysis Group, the...

cve-2017-0199

cve-2017-0199 Sample file used in the wild https://twitter.com/SyFi2k...

CVE-2021-30632

CVE-2021-30632 Chrome V8 RCE Exploit for Windows Tested Version : Chrome 91, 92, 93.0.4577.63 Demo reference Chrome in-the-wild bug analysis: CVE-2021-30632 https://securitylab.github.com/research/inthewildchromecve202130632/ JS POC sample...

cve-2023-5217-poc

CVE-2023-5217: libvpx VP8 Encoding Heap Overflow PoC CVE-2023-5217 is an in-the-wild exploited libvpx vulnerability that was found by Clément Lecigne of Google's Threat Analysis Group to be targeting Chrome. This repo shows how to trigger CVE-2023-5217 in the browser using the WebCodecs and...

CVE-2022-47986

CVE-2022-47986 Why This vulnerability is exploited in the wild. IceFire use this vulnerability to deploy the ransomware on targeted systems, i would like to help SOC/Blue teams to identify impacted systems and Pentesters/Red teams to exploit and report it. Description I propose pure python and ru...

CVE-2023-38831

CVE-2023-38831 - RARLAB WinRAR Code Execution Vulnerability ⚠️ For educational and authorized security research purposes only Original Exploit Authors Very grateful to the original PoC author b1tg and Group-IB Threat Intelligence Description RARLabs WinRAR before 6.23 allows attackers to execute...

CVE-2022-26134-LAB

CVE-2022-26134-LAB Confluence Server and Confluence Data Center include a significant unauthenticated remote code execution vulnerability identified as CVE-2022-26134, according to a security advisory released by Atlassian on June 2, 2022. The vulnerability was unpatched when it was published on...

CVE-2025-66478

CVE-2025-66478 - Analysis of Real Attack Logs for Next.js Server Actions RCE Vulnerability Overview This project collects real attack logs recorded from a Next.js 15.1.2 application running in a Docker container exposed to the internet. These logs show how the CVE-2025-66478 vulnerability is bein...

CVE-2016-7255

CVE-2016-7255 Proof Of Concept privilege escalation exploit using CVE-2016-7255, aims to mirror the functionality of the exploit found in the wild as described by Trend Micro. You may want to fix the recovery before using this anywhere important. Some code taken from tinysec's original crash PoC...